$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/675a776a-143a-3ea0-8f05-3dc2dbd2af7b.roa File: 675a776a-143a-3ea0-8f05-3dc2dbd2af7b.roa (raw, json) Hash identifier: i1UtceMb7iy3rH3IfHJ3XDFCzUntkiRZoVMBdzSrrXE= Subject key identifier: EE:62:E6:A9:A9:AE:18:C9:CE:05:9F:B9:97:BD:A8:4C:20:00:D1:45 Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Certificate serial: 010D0C9F4328584F2527A8EA3B221166F78C7980 Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/675a776a-143a-3ea0-8f05-3dc2dbd2af7b.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 293 IP address blocks: 192.124.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a8:ea:3b:22:11:66:f7:8c:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=f89e72a0-8d50-4632-81fa-842817080540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:d5:eb:5a:1c:4d:98:92:f6:74:70:95:2f: 62:44:cf:8b:1e:0e:dd:3d:d1:ef:fe:58:12:de:cf: 25:9d:81:d7:98:e8:78:15:35:3b:6a:82:12:98:8d: 04:02:8f:d5:61:da:84:fa:55:2c:bd:63:da:3d:dc: 24:07:1f:bd:a6:65:d9:82:da:a6:6f:1d:ad:f2:90: 77:3d:b5:02:e2:d1:3c:12:8e:3b:fe:51:46:3c:7d: b1:b7:92:03:11:f4:57:dc:e4:2f:f1:c6:36:c6:bf: bf:84:a4:da:9a:08:5e:2e:0c:31:8e:e4:3e:28:aa: 06:7d:a3:7e:b2:bc:fd:33:3e:8f:bc:fa:65:ab:ef: 95:bb:80:52:b6:d5:4c:51:bf:25:7a:78:e2:a8:d3: 95:ae:96:b9:af:ea:08:88:5f:4e:2e:a4:91:48:4a: e5:f1:70:f1:67:bd:fb:ba:9c:93:bf:7d:10:74:be: b2:46:94:a4:49:9b:87:1f:82:21:56:01:1c:55:41: 81:5e:ca:f5:8d:bd:c8:f2:02:0f:91:b2:49:7e:df: c2:de:56:dd:f3:65:51:70:0e:a8:fd:94:29:69:ac: 75:98:51:51:d0:41:3b:7b:b8:d4:a7:6a:74:b8:95: 7b:bc:51:ee:eb:f7:35:3b:14:89:57:bd:4e:b4:1f: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:62:E6:A9:A9:AE:18:C9:CE:05:9F:B9:97:BD:A8:4C:20:00:D1:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/675a776a-143a-3ea0-8f05-3dc2dbd2af7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl X509v3 Authority Key Identifier: keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer sbgp-ipAddrBlock: critical IPv4: 192.124.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b9:67:cc:cd:ab:82:b8:09:03:14:78:35:6e:f8:ef:82:5f: df:86:7e:3b:e9:c7:4c:00:2f:aa:13:16:53:75:e3:92:93:56: ab:d6:3f:df:9f:17:35:52:65:e1:67:c8:92:2c:c7:ec:26:3b: 7d:d5:58:6e:28:61:e9:50:12:f7:99:9d:21:6e:05:7d:63:a4: b1:34:ff:25:d3:fb:1d:6d:f5:c9:c3:23:65:e1:7d:1c:41:70: 02:f6:d4:f9:0e:7e:38:e7:82:f7:59:0a:bb:f8:be:ac:5c:1a: 8d:3d:1e:d9:93:7f:c1:2b:f4:95:0d:bb:33:38:69:c7:ca:80: 99:38:91:34:eb:7b:9b:8b:31:af:e5:7a:ce:0c:49:95:63:ab: b7:56:62:a9:54:0e:3f:ac:a8:a6:00:6b:b6:d2:72:fe:e1:36: 00:d4:33:ca:c6:4c:ba:78:ad:b3:d3:1f:df:3d:8e:f2:50:92: 56:6a:8b:9d:92:cb:9a:c5:2b:d4:db:c7:ac:70:ca:27:fe:70: 74:88:d5:89:d2:f1:c0:3d:d4:b8:33:2a:7b:d4:d4:2d:39:5f: ac:89:93:0e:0d:5f:6c:13:f6:47:9b:ff:cd:12:16:89:a1:31: 35:49:38:a6:9c:80:9b:3e:72:21:8d:cb:73:6e:a5:d9:b3:13: 3c:95:c4:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6jqOyIRZveMeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz ZmM1MB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk Zjg5ZTcyYTAtOGQ1MC00NjMyLTgxZmEtODQyODE3MDgwNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOvV61ocTZiS9nRwlS9iRM+LHg7dPdHv/lgS 3s8lnYHXmOh4FTU7aoISmI0EAo/VYdqE+lUsvWPaPdwkBx+9pmXZgtqmbx2t8pB3 PbUC4tE8Eo47/lFGPH2xt5IDEfRX3OQv8cY2xr+/hKTamgheLgwxjuQ+KKoGfaN+ srz9Mz6PvPplq++Vu4BSttVMUb8lenjiqNOVrpa5r+oIiF9OLqSRSErl8XDxZ737 upyTv30QdL6yRpSkSZuHH4IhVgEcVUGBXsr1jb3I8gIPkbJJft/C3lbd82VRcA6o /ZQpaax1mFFR0EE7e7jUp2p0uJV7vFHu6/c1OxSJV71OtB8JiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5i5qmprhjJzgWfuZe9qEwgANFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2 ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNjc1YTc3NmEtMTQzYS0z ZWEwLThmMDUtM2RjMmRiZDJhZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2 MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB25Z8zNq4K4CQMUeDVu+O+CX9+Gfjvpx0wAL6oTFlN145KTVqvWP9+f FzVSZeFnyJIsx+wmO33VWG4oYelQEveZnSFuBX1jpLE0/yXT+x1t9cnDI2XhfRxB cAL21PkOfjjngvdZCrv4vqxcGo09HtmTf8Er9JUNuzM4acfKgJk4kTTre5uLMa/l es4MSZVjq7dWYqlUDj+sqKYAa7bScv7hNgDUM8rGTLp4rbPTH989jvJQklZqi52S y5rFK9Tbx6xwyif+cHSI1YnS8cA91LgzKnvU1C05X6yJkw4NX2wT9keb/80SFomh MTVJOKacgJs+ciGNy3NupdmzEzyVxOQ= -----END CERTIFICATE-----Generated at Mon Sep 21 13:11:05 2026 by rpki-client